A public proof-of-concept for the vBulletin RCE vulnerability CVE-2026-61511 is now live. Here's how the eval() injection ...

Spread the loveDreamweaver, for many web developers, has been a steadfast companion through countless projects. While its ...

Two Joomla file upload vulnerabilities landed on CISA’s Known Exploited Vulnerabilities catalog on July 10. Both were already being hit by automated attackers weeks before anyone assigned them a CVE ...

When you realize your WordPress site might have been hacked, the scariest thing is to start touching things without knowing what to do. If you panic and delete plugins, reinstall themes, or delete ...

Wordfence blocked 17M+ attempts to exploit a Gravity SMTP bug that leaks API keys and system data from WordPress sites without authentication. Attackers are actively exploiting a vulnerability in the ...

Thousands of WordPress sites running the Kali Forms plugin are exposed to attackers who can execute arbitrary code on web servers without ever logging in. The flaw, tracked as CVE-2026-3584, carries a ...

WordPress 7.0 "Armstrong," released May 20, 2026, arrived without the real-time collaborative editing feature that had been its stated centerpiece for months — and within two days of launch, a ...

Two newly disclosed vulnerabilities in the Avada Builder WordPress plugin have placed around one million sites at risk of arbitrary file read and SQL injection attacks. According to analysis from ...

A 2026 WordPress supply-chain attack allegedly turned 30+ sold plugins into a dormant backdoor oper… This is what a real WordPress supply chain attack looks like in 2026. It was not a typo-squatted ...

A critical-severity vulnerability in the File Uploads addon for the Ninja Forms WordPress plugin could allow threat actors to take over vulnerable deployments, cybersecurity firm Defiant warns.

Hackers can read arbitrary files with this newly discovered flaw ...

A vulnerability in the Smart Slider 3 WordPress plugin, active on more than 800,000 websites, can be exploited to allow subscriber-level users access to arbitrary files on the server. An authenticated ...